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Top Stories 

• Colorado regulators announced that 2 new oil spills were discovered bringing the total to 
14 amounting to nearly 44,000 gallons after flooding damaged oil and gas wells in Weld 
County. - Associated Press (See item 3) 

• A partial shutdown of the U.S. government commenced October 1, prompting several 
government agencies and departments to close, as well as forcing the closure of a number 
of national parks throughout the U.S. - Associated Press (See item 20 ) 

• Researchers at Symantec were able to sinkhole around 500,000 infected bots in the 1.9 
million-strong ZeroAccess botnet. - Softpedia (See item 25 ) 

• Kaspersky Lab and B2B International published the results of a study on Android security 
and found that more than half of Android device users do not use security software. - 
Softpedia (See item 26 ) 
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Energy Sector 



1. September 30, Associated Press - (California) Edison worker killed after fire erupts 
in Huntington Beach electrical vault. A Southern California Edison contract worker 
was killed September 30 after being trapped in an underground vault that burst into 
flames in Huntington Beach. The 5-member TAM Construction crew was performing a 
scheduled outage when the vault became energized and caught on fire. 

Source: http://www.scpr.org/news/2013/09/30/39577/worker-trapped-underground- 
after-huntington-beach/ 

2. September 30, San Francisco Chronicle - (California) City power plant back online 
after getting torched in Rim Fire. The Holm Powerhouse in San Francisco was 
brought back to full power September 30 after the plant was damaged during the Rim 
Fire, forcing officials to shut it down as a precaution. 

Source: http://blog.sfgate.com/cityinsider/2013/09/30/citv-power-plant-back-online- 
after-getting-torched-in-rim-fire/ 

3. September 30, Associated Press - (Colorado) 2 new oil spills due to flooding 
discovered in northern Colorado; more wells to be inspected. Colorado regulators 
announced September 30 that 2 new oil spills were discovered bringing the total to 14 
amounting to nearly 44,000 gallons after flooding damaged oil and gas wells in Weld 
County. Regulators also estimated that roughly 17,350 gallons of wastewater 
containing residual amounts of oil and gas were spilled in the flooding in Wattenberg 
Field. 

Source: 

http://www.dailyjournal.net/view/story/540ac43fd9024e93b850e35554ca740e/CO— 

Colorado-Flooding-Oil-Spills/#.UkrtXIakowp 

For another story, see item 23 

T Return to topi 

Chemical Industry Sector 

4. October 1, Cherry Hill Courier-Post - (New Jersey) Hazardous materials probed in 
South Jersey town. The U.S. Environmental Protection Agency is investigating over 
five acres of the Superior Barrel & Drum facility in Elk, New Jersey, where more than 
1 ,000 containers were found in disrepair, with some leaking hazardous materials into 
the ground. 

Source: 

http://www.courierpostonline.com/article/20131001/NEWS01/310010Q18/Hazardous- 

materials-probed-South-Jersey-town 

T Return to topi 

Nuclear Reactors, Materials, and Waste Sector 
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5. September 30, Associated Press - (New Jersey) Oyster Creek plant offline for 
maintenance work. The Oyster Creek nuclear power plant in Lacey Township was 
shut down September 30 for planned maintenance to a turbine speed controller. 

Source: http://www.mysanantonio.com/news/article/Ovster-Creek-plant-offline-for- 
maintenance-work-4857273.php 

T Return to topi 

Critical Manufacturing Sector 

6. September 30, KEPR 19 Pasco - (Washington) Tornado packing 110 mph winds 
damages buildings in Frederickson. An EF-1 tornado touched down in Frederickson 
September 30, causing damage to manufacturing facilities belonging to EnCon, 
Northwest Door, and Boeing. 

Source: http://www.keprtv.com/news/local/Possible-tornado-damages-buildings-in- 
Frederickson-2258 1007 1 .html 

7. September 30, New York Times - (National) BMW recalls 76,000 vehicles for brake 
booster problem. BMW announced the recall of 76,000 model year 2012-2014 3- 
Series, 5-Series, XI, X3, and Z4 vehicles due to an issue with an oil supply vacuum 
pump that can cause a loss of power brake assist. 

Source: http://wheels.blogs.nvtimes.com/2013/09/30/bmw-recalls-7600Q-vehicles-for- 
brake-booster-problem/ 

8. September 30, U.S. Department of Labor - (Montana) USA Brass Company Inc. of 
Bozeman, Mont., cited by the U.S. Department of Labor’s OSHA for overexposing 
workers to lead. The Occupational Safety and Health Administration cited USA Brass 
Company Inc. with 10 serious violations at its Bozeman facility for overexposing 
workers to lead. Proposed fines totaled $45,500. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=24912 

9. September 30, U.S. Department of Labor - (Texas) U.S. Labor Department’s OSHA 
cites Fort Worth F&D Head Co. for 18 serious safety violations for exposing 
workers to amputations, struck-by hazards. Fort Worth F&D Head Co. was cited by 
the Occupational Safety and Health Administration with 18 serious safety violations for 
exposing workers at its Fort Worth facility to struck-by and amputation hazards. 
Proposed fines totaled $88,200. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS REFEA 
SES&p id=24903 

10. September 30, U.S. Department of Labor - (New York) Champlain, NY, rail car 
interior manufacturer cited by U.S. Labor Department’s OSHA for 24 safety and 
health violations. The Occupational Safety and Health Administration cited Testori 
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Interiors Inc. after an inspection of its Champlain facility found 24 violations of safety 
and health standards. Proposed fines totaled $170,100. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=24909 



T Return to topi 



Defense Industrial Base Sector 



11. September 30, ABC News - (National) Report: Military lost control of F-35 
contractors, errors abound. The U.S. Department of Defense Inspector General 
released a report September 30 describing 719 flaws they found with the primary 
manufacturer and five other contractors’ way of assembling F-35 jet planes as part of 
the F-35 Joint Strike Fighter program. The primary manufacturer stated that a majority 
of the Corrective Action Requests were addressed and closed. 

Source: http://abcnews.go.com/Blotter/report-militarv-lost-control-f35-contractors- 
errors-abound/story?id=20422344 



T Return to topi 



Financial Services Sector 

12. September 30, Burlington Times-News - (Virginia; North Carolina) Burlington man, 
fugitive in federal fraud case, arrested. A former manager at Burlington, North 
Carolina-based Phoenix Housing Group and fugitive in a $24 million mortgage fraud 
case was arrested at Dulles International Airport in Virginia September 27. 

Source: http://www.thetimesnews.com/news/top-news/burlington-man-fugitive-in- 
federal-fraud-case-arrested- 1 . 2 1 0844 



T Return to topi 

Transportation Systems Sector 

13. October 1, Reuters - (Illinois) Train that crashed in Chicago likely unmanned. A 
Chicago Transit Authority official reported that a commuter train involved in a 
collision in Forest Park that injured about 4 dozen people September 30 was likely 
unmanned when it crashed into another train. 

Source: http://news.msn.com/us/train-that-crashed-in-chicago-likely-unmanned 

14. September 30, WHTM 27 Harrisburg - (Pennsylvania) Pa. Turnpike reopened after 
fatal truck crash. A fatal accident involving a semi-truck that killed one driver on the 
Pennsylvania Turnpike in Fran kl in County closed the eastbound lanes for nearly 8 
hours and the westbound lanes for about 5 hours September 30. 

Source: http://www.abc27.com/story/23565762/crash-fire-closes-pa-tumpike-near- 
willow-hill 
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Food and Agriculture Sector 

15. September 30, Associated Press - (Missouri) Statewide quarantine for ash wood 
products expands to include all 114 counties, St. Louis. Missouri’s quarantine on ash 
wood caused by the emerald ash borer was expanded from nine counties to the entire 
State, now allowing the transportation of ash wood freely within Missouri. 

Source: 

http://www.therepublic.com/view/story/6cb504a8e51248bl8e0bl8edda04da83/MO— 

Ash-Wood 



T Return to topi 

Water and Wastewater Systems Sector 

16. September 30, Traverse City Record Eagle- (Michigan) DEQ cites city for water 
treatment failures. The Michigan Department of Environmental Quality issued 
Traverse City a significant deficiency violation notice after two July 2013 incidents 
where the city failed to use enough chemicals to filter out diarrhea-causing pathogens 
and not reporting the failure in the system for nearly a month. 

Source: http://record-eagle.com/latest-mobile/x703127169/Coming-Tuesdav-DEQ- 
cites-city-for-water-treatment-failures 

17. September 30, Durango Herald- (Colorado) Water-main break brings gusher. A 
construction crew broke a water main September 30 in Durango while removing an 
abandoned water intake on the Animas River, causing a spill of 17 million gallons of 
water per hour. The spill from the 12-inch water line lasted two hours before being 
capped and customers lost water pressure but not water service. 

Source: http://durangoherald.com/article/20130930/NEWS01/130939983/- 
1/taxonomy/Water-main-break-cuts-service-to-residents- 



For another story, see item 3 
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Healthcare and Public Health Sector 

18. September 30, Salt Lake City Deseret News - (Utah) Stericycle denies it violated 
pollution limits, setting up possible legal fight. Stericycle, the operator of the U.S.’s 
largest medical waste burn plants, denied it violated State and federal permits by 
releasing too many hazardous pollutants from its north Salt Lake City facility. The 
company is fighting allegations from the Utah Division of Air Quality that were 
detailed in a May notice of violations. 

Source: http://www.deseretnews.com/article/865587397/Stericycle-denies-it-violated- 
pollution-limits-setting-up-possible-legal-fight.html 
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19. September 30, SC Magazine - (California) Unencrypted laptop stolen from Calif, 
hospital puts patients at risk. The Santa Clara Valley Medical Center notified patients 
September 27 of a theft of an unencrypted laptop from the hospital’s audiology 
department. Hospital officials are cooperating with law enforcement agents in the 
investigation. 

Source: http ://w w w . scmagazine .com/unencrypted-laptop-stolen-from-calif-hospital- 
puts-patients-at-risk/article/3 13985/ 



T Return to topi 



Government Facilities Sector 

20. October 1, Associated Press - (National) Americans anxious, irritated as 
government partially shuts down amid budget impasse. A partial shutdown of the 
U.S. government commenced October 1, prompting several government agencies and 
departments to close, as well as forcing the closure of a number of national parks 
throughout the U.S. 

Source: http://www.washingtonpost.com/national/natl-parks-paychecks-and-panda- 
cam-all-casualties-of-budget-standoff-in-washington/2013/10/01/19406942-2a50-lle3- 
b!41-298f46539716 story.html 

21. October 1, Associated Press - (Colorado) 5 hikers killed by Colorado rock slide; girl 
injured. Officials have asked the U.S. Forest Service for a permanent closure of a trail 
below the Agnes Vaille falls in Chalk Creek Canyon in Colorado after 5 hikers were 
killed and another was injured. 

Source: http://news.msn.com/us/5-hikers-killed-bv-colorado-rock-slide-girl-iniured 

22. October 1, Associated Press - (California) Power restored at UC Berkeley after 
explosion. Eleven buildings remained without power October 1 at the University of 
California, Berkeley after an explosion in an underground utility vault outside 
California Hall September 30. One person was hospitalized and 3 others were injured, 
and several classes remained cancelled due to the outage. 

Source: http://www.sacbee.com/2013/09/30/578304Q/power-outage-at-uc-berkelev- 
leads.html 

23. September 30, KETK 56 Jacksonville - (Texas) Winona ISD to dismiss at noon due 
to power outage. Officials announced the early dismissal of Winona ISD September 
30 due to a power outage in the district. Utility crews reported that over 57,000 people 
were without power in Gregg County, Texas. 

Source: http://www.ketknbc.com/news/winona-isd-to-dismiss-at-noon-due-to-power- 
outage 

T Return to topi 

Emergency Services Sector 
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24. October 1, KSWO 7 Lawton - (Oklahoma) Stephens County jailer sent to hospital 
after inmates start fire. Authorities put out a fire at a Stephens County jail September 
30 after inmates put toilet paper in a light fixture. One guard was sent to the hospital for 
minor injuries. 

Source: http://www.kswo.com/story/23575348/iailer-sent-to-hospital-after-inmates- 
start-fire-in-jail 



f Return to topi 

Information Technology Sector 

25. October 1, Softpedia - (International) Over half a million ZeroAccess hots 
sinkholed by Symantec. Researchers at Symantec were able to sinkhole around 
500,000 infected bots in the 1.9 million-strong ZeroAccess botnet. The malware 
delivery, Bitcoin mining, and click fraud botnet recently began updating itself, 
preventing more bots from being sinkholed. 

Source: http://news.softpedia.com/news/Over-Half-a-Million-ZeroAccess-Bots- 
Sinkholed-b y-S ymantec- 3 87437 .shtml 

26. October 1 , Softpedia - (International) Over half of Android devices owners don’t use 
security software. Kaspersky Lab and B2B International published the results of a 
study on Android security and found that more than half of Android device users do not 
use security software. 

Source: http://news.softpedia.com/news/Over-Half-of-Android-Device-Qwners-Don-t- 
Use-Security-Software-387537.shtml 

27. October 1, IDG News Service - (International) Fake AdBlock Plus app removed 
from Google’s Play store. Google removed an app masquerading as the popular 
AdBlock Plus app from its Google Play store. The fake app delivered more 
advertisements to users. 

Source: http://www.networkworid.com/news/2013/10Q113-fake-adblock-plus-app- 
removed-274355.html 

28. September 30, The Register - (International) Sweet murmuring Siri opens stalker 
vulnerability hole in iOS 7. A researcher found that the Siri personal assistant can be 
used to gain access to the contacts and messages of an iPhone running the newest 
version of iOS 7. 

Source: 

http://www.theregister.co.uk/2013/09/30/sweettalking siri opens stalking security ho 
lejnjos 7/ 

29. September 30, IDG News Service - (International) Fort Disco malware is now 
targeting email and FTP servers. The Fort Disco malware has been observed being 
used to attack email and FTP servers, in addition to its previous uses in brute-force 
password guessing against content management systems like WordPress and Joomla. 
Source: 

http://www.computerworld.eom/s/artiele/9242829/Fort Disco malware is now target 
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ing email and FTP servers 



30. September 30, Threcitpost - (International) Linux kernel update fixes DoS, leakage 
bugs. Debian developers notified users of a new Linux kernel build, Linux 2.6, which 
fixes 1 1 vulnerabilities that could allow a denial of service (DoS) attack, privilege 
escalation, or information leak. 

Source: http://threatpost.com/linux-kemel-update-fixes-dos-leakage-bugs 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

31. October 1, Associated Press - (New York) 5 wounded in NYC bike path stabbing, 
slashing. New York Police took a homeless man into custody October 1 after he 
allegedly stabbed four people and a child with a pair of scissors. All victims were 
expected to survive and were taken to hospitals for care. 

Source: http://abcnews.go.com/US/wireStorv/wounded-nvc-bike-path-stabbing- 
slashing-20430652 

32. October 1, St. Paul Pioneer Press- (Minnesota) Downtown St. Paul athletic club, 
hotel evacuated after chemical spill. The St. Paul Athletic Club and Hotel 340 were 
evacuated October 1 after a custodian mistakenly mixed sulfuric acid with chlorine 
which caused a gas to spread. Emergency crews shut down local streets and a 
specialized, State-funded team began work to clean up the site. 

Source: http://www.twincities.com/stpaul/ci 242 12695/do wnto wn-st-paul-chemical- 
spill-forces-evacuation-athletic 
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Dams Sector 



33. September 30, Charlotte County Reporter - (Florida) Seawalls collapse from flood 
water. Heavy flood waters the week of September 23 caused nearly 60 seawalls in 
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Punta Gorda Isles to collapse. The seawalls will be replaced by Punta Gorda City work 
crews. 

Source: http://www. abc-7.com/storv/23570997/seawalls-collaDse-from-flood-water 
For another story, see item 2 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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